Files
lvfs-setup-experimental/docker-compose.yaml
Artur Kowalski c63f4c4e4e docker-compose.yaml: mount rootfs read-only
Done to catch any attempt to create files outside of data directory by
turning them into hard errors (better than suddenly loosing some data).

Signed-off-by: Artur Kowalski <artur.kowalski@3mdeb.com>
2025-08-18 20:07:11 +02:00

38 lines
970 B
YAML

services:
lvfs:
image: lvfs:latest
environment:
LVFS_HOST_NAME: localhost
# Must be set properly. hostname part should be externally-reachable
# hostname (or IP address) e.g. lvfs.3mdeb.com, port must match with port
# mapping below (the `published` port is the externally reachable port).
# If using SSL scheme should be changed to https://
LVFS_CDN_DOMAIN: http://localhost:5000
secrets:
- secret_key
- secret_vendor_salt
- secret_addr_salt
ports:
- name: LVFS wsgi
protocol: tcp
target: 5000
published: 5000
volumes:
- type: volume
read_only: false
source: lvfs_data
target: /data
- type: tmpfs
target: /tmp
read_only: true
secrets:
secret_key:
file: secrets/secret_key
secret_vendor_salt:
file: secrets/secret_vendor_salt
secret_addr_salt:
file: secrets/secret_addr_salt
volumes:
lvfs_data: